SCARD

Suspicious activity by IP address 197.243.109.171

Below is a list of the last 500 suspicious interactions with this IP.

Last observed Mon, 06 Jul 2026 10:12:53 (Australia/Brisbane)

Back to main list

Summary of suspicious activity by IP address 197.243.109.171

Description Count
ET INFO WinRM wsman Access - Possible Lateral Movement 354
ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement 354

Detailed activity by IP address 197.243.109.171

Timestamp Description Protocol Destination Port
2026-07-06 10:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:12:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:12:52 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:44 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 10:10:44 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 10:10:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:57:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:57:04 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:57:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:57:04 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:43 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 08:18:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 08:18:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:45:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:45:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:45:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:45:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 07:17:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:32 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:46:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:46:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:03 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:03 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 06:04:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 06:04:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:36:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:13:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:13:19 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:13:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:13:19 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:03:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 05:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:03:36 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 05:03:36 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:31 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:26:30 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:22:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:22:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 03:22:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 03:22:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:58 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:58 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 02:27:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 01:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 01:58:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:33 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:33 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:42:29 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-06 00:13:21 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:50 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:50 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 23:45:49 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:27 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:54:27 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:54:26 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:54:26 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:39 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:39 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:49:34 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 22:12:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:19:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:19:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:19:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 21:00:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:48:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:48:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 20:26:56 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:52:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:02 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:52:02 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:51:57 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 19:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:30:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:30:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 18:30:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 18:30:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:38:42 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:42 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:38:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:38:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:22 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:22 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 17:12:17 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:49:12 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 16:17:37 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 15:45:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 15:45:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:57:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 13:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 13:57:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:16 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 12:23:15 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:31:47 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:31:47 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:31:46 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:31:46 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:06:40 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:40 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 11:06:35 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:50:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:50:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 09:50:24 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 09:50:24 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:58:05 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:58:05 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:58:00 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:32:14 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:32:13 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:54 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 07:03:53 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:19:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:19:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:19:38 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:19:38 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:00:23 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:00:23 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET INFO WinRM wsman Access - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985
2026-07-05 06:00:18 ET USER_AGENTS WinRM User Agent Detected - Possible Lateral Movement TCP 5985

 

Back to top